Got Scammed? What to Do in the First Hour

That sinking feeling hits the moment you realize the “bank,” the “toll agency” or the “grandson” was a scammer. Your first instinct may be embarrassment. Push past it. The first hour matters more than anything else, because the faster you contact the company that moved your money, the better your chance of stopping or reversing it.

This checklist is organized by how you paid, because that decides who you call first and what protections you have. Work from the top down, do not skip the reporting step, and watch out for the second wave of scammers who promise to get your money back.

The first 10 minutes: 3 steps for every scam

No matter how you paid, do these right away:

1. Stop all contact with the scammer. Hang up, stop replying, and do not answer if they call back. They may pose as police, a bank or a lawyer to keep you engaged.
2. Call the company you paid through. Use the number on the back of your card, in your official app or on the company’s real website, never a number the scammer gave you.
3. Write everything down. Note dates, times, amounts, phone numbers, usernames, web addresses and transaction IDs. Screenshot texts, emails and chats before you delete anything.

Key takeaway: Who you call first depends on how you paid. Credit cards have the strongest protections, while gift cards, wire transfers and crypto are hardest to recover, so speed matters most there.

Your first-hour checklist by payment method

The FTC publishes step-by-step advice for each payment type. Here is a quick-reference version, followed by details.

Credit card

1. Call your card issuer using the number on the back of the card or its app.
2. Say the charge was fraudulent or that you were tricked, and ask to dispute it.
3. Ask for a new card number if the scammer has your card details.
4. Follow up in writing. Under the Fair Credit Billing Act, the FTC says your written dispute should reach the issuer within 60 days after the first statement showing the charge was sent to you. The issuer must acknowledge it within 30 days and resolve it within 90 days.

Debit card

1. Call your bank or credit union immediately.
2. Report the unauthorized transactions and ask for a refund.
3. Speed matters. Under federal Regulation E, if your card is lost or stolen and you report it within 2 business days, your liability is capped at $50. Wait longer, and it can rise to $500 or more. If only your card number was misused, the FTC says you are not responsible as long as you report within 60 days of the statement showing the debits.

Bank transfer or Zelle

1. Call your bank or credit union right away.
2. Explain that you were scammed, and ask it to reverse the payment and refund your money.
3. Ask whether the bank can contact the receiving bank or freeze the funds.

Be aware that payments you authorized yourself, even when tricked, may not get the same protections as unauthorized ones. Ask your bank to explain its policy and request the decision in writing.

Payment apps

1. Report the payment inside the app and contact its support team immediately.
2. Ask it to reverse the payment and refund your money.
3. If the app is linked to a credit card, also call your card issuer about a dispute.

Wire transfer

1. Call the wire company, such as Western Union or MoneyGram, immediately. If you wired from your bank, call your bank too.
2. Tell them a scammer tricked you into sending the money and ask for a refund.
3. If the transfer has not been picked up yet, it may still be possible to stop it.

Gift cards

1. Contact the gift card company using the number on the back of the card.
2. Tell them a scammer got the card number and PIN, and ask for a refund.
3. Keep the physical card and the receipt.

No real business or government agency asks you to pay with gift cards. If anyone insists on it, that alone signals a scam.

Cryptocurrency

1. Contact the exchange or crypto ATM operator you used.
2. Report the transaction as fraudulent and ask it to reverse the payment.
3. Report it to the FTC. The FTC notes crypto payments usually do not have the legal protections cards have, although some states have laws that may help.

Cash sent by mail or courier

Call the US Postal Inspection Service at 1-877-876-2455 right away. It may be able to intercept a domestic package before delivery, for a fee. If you used FedEx or UPS, call that carrier as soon as possible.

If you shared personal information

Money is not the only thing scammers take. If you gave out personal details, protect your identity next.

• Social Security number used by the scammer: report it at IdentityTheft.gov to get a personalized recovery plan.
• Social Security number exposed but not yet misused: follow the steps at IdentityTheft.gov/databreach, and consider a free credit freeze with Equifax, Experian and TransUnion.
• Username and password: change the password right away, change it anywhere else you reused it, and turn on two-factor authentication.
• Locked out of an account: use the service’s official account recovery process.
• One-time codes: if you read a verification code to someone, treat that account as compromised and secure it immediately.

If you gave someone remote access to your device

Tech support scammers often ask you to install software that lets them control your computer or phone. The FTC advises you to:

1. Disconnect from the internet.
2. Update or install reputable security software and run a full scan, deleting anything it flags.
3. Change your passwords from a different, clean device if possible, and turn on two-factor authentication.
4. Get help from the device manufacturer or a trusted local repair shop if you are unsure the device is clean.

Also uninstall any remote access app the scammer had you install, and call your bank if you logged in to it while they were connected.

Report the scam

Reporting will not always get your money back, but it helps investigators, can support your bank dispute and warns others.

• FTC: ReportFraud.ftc.gov for any scam.
• FBI Internet Crime Complaint Center: ic3.gov for online and cyber-enabled fraud.
• Your state attorney general: most have consumer complaint forms.
• Local police: file a report, especially for identity theft or large losses. Some banks ask for a police report number.
• The platform involved: report the profile, listing, ad or phone number to the social network, marketplace or carrier. Forward scam texts to 7726.

Watch out for recovery scams

Scammers buy lists of people who have already been scammed, then contact them offering to recover the lost money for a fee. The FTC warns they often pose as government agencies, consumer groups or law firms. Real agencies will never charge you to get a refund, ask for your financial account numbers or guarantee that you will get your money back.

If someone reaches out offering to recover your money, do not pay. Verify any FTC refund program only at ftc.gov/refunds. This is not legal advice. For large losses, consider speaking with a licensed attorney you find independently.

Where to start: the next 24 hours

1. Hour 1: Call your card issuer, bank, app, gift card company or exchange. Change exposed passwords.
2. Hour 2: Report at ReportFraud.ftc.gov and ic3.gov. Save your report numbers.
3. Today: Visit IdentityTheft.gov if you shared personal details, and place a credit freeze if your Social Security number was exposed.
4. This week: Follow up in writing on any disputes, check your statements daily and turn on transaction alerts.
5. Ongoing: Learn the patterns so it does not happen again. Start with how to spot a scam text, AI voice cloning scams and how to tell if an online store is fake.

Conclusion

Being scammed is stressful, but you are not powerless. Call the company that moved your money first, secure your accounts and identity second, and report it third. Act quickly, keep records, ignore anyone who offers to recover your money for a fee, and give yourself some grace. Scammers are professionals, and it can happen to anyone.

Sources

• FTC Consumer Advice: What to do if you were scammed — steps by payment method, personal information and remote access
• FTC Consumer Advice: Using credit cards and disputing charges — Fair Credit Billing Act 60-day dispute window and issuer timelines
• CFPB Regulation E, 12 CFR 1005.6: Liability for unauthorized transfers — $50 and $500 debit card liability tiers
• FTC Consumer Advice: Lost or stolen credit, ATM and debit cards — card number misuse and 60-day reporting
• FTC Consumer Advice: Refund and recovery scams — how recovery scammers target past victims